JPH09149071A - Network management method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a virtual LAN providing setting corresponding to users. SOLUTION: When the user is going to access a network via a terminal equipment, a user identification means 003 sends a user name to a setting information acquisition means 002. The setting information acquisition means 002 sends a user name to a setting information notice means 006, which sends the user name to a user information retrieval means 004. The user information retrieval means 004 uses a user database storing the user name, a virtual LAN ID and virtual LAN connection information to retrieve the virtual LAN ID and the virtual LAN connection information by using the user name as a retrieval key. The user information retrieval means 004 returns the virtual LAN ID and the virtual LAN connection information to the setting information notice means 006, which returns them to the setting information acquisition means 002 of the terminal equipment. The setting information acquisition means 002 sends the virtual LAN ID and the virtual LAN connection information to the virtual LAN selection means 001. The virtual LAN selection means 001 connects to the virtual LAN 1 based on the virtual LAN ID and the virtual LAN connection information.

Description

Detailed Description of the Invention

[0001]

The present invention relates to a network management method in a computer network.

[0002]

2. Description of the Related Art Conventionally, in order to configure a virtual LAN, the virtual LAN to which the terminal belongs is determined by the physical address of the terminal, the communication protocol, or a combination thereof. For more information on this technology, see Data Comuni
Cations, Vol. 24, No. 3, PP87
−100, “Virtual LANs Get Re
al "(published by McGraw-Hill).

[0003] ATM Forum (ATM
Forum), “LAN Emulsion O
ver ATM: Version 1.0 Spec
LECS is described in the “information.” LECS is a virtual LA from the client LEC.
N receiving the name of N and forming the virtual LAN
The address of the ES is returned to the LEC. Thus, L
A virtual LAN configuration based on the name of the AN is realized.

[0004] Reference R.I.F. Droms, “Dynamic Host Co.
nfiguration Protocol ”, RFC
1541 and 1993, there is a description of a protocol relating to automatic host setting. This automatically allocates logical resources such as host addresses. The host acts as a client, and the server has addresses already used and unused on the network it manages. DHCP to directly connected network
The server that has received the Discover message transfers the message, allocates one of the unused addresses, and sends back the DHCP Offer message. If the client accepts the address, it sends a DHCP Request message to the server, and the server authorizes use of the address by sending back a DHCP ACK message.

[0005]

In the case where a virtual LAN is configured using the physical address of a terminal, a user moves to use another terminal and wants to communicate with the virtual LAN used by the user before. Occasionally, it is necessary to recognize the physical address of the terminal used at the destination, notify the previous virtual LAN administrator, and change the configuration of the virtual LAN. It is difficult to recognize the number system, and mistakes are easy to occur. Further, when a virtual LAN is configured by a communication protocol, when one user wants to use a plurality of protocols on one terminal, the user is registered as a different virtual LAN, and the number of virtual LANs increases, and management of the virtual LAN becomes very difficult. become.

An object of the present invention is to overcome the drawbacks of the prior art and to provide a method for accessing a network using a plurality of protocols with a single terminal even when the user moves or when the terminal user changes. An object of the present invention is to provide a network management method that does not require a user or an administrator to change a setting.

[0007]

A first invention is a virtual L which logically groups terminals connected to a network.
In a computer network in which a plurality of ANs are interconnected, a virtual LAN owned by the terminal is determined based on the attribute of the terminal user. The setting information of the client is determined using the name of the user, the registered group name, and the like, and the setting of the client is performed.

[0008] This makes it possible to make settings suitable for the user, thereby making it possible to automate settings and share terminals.

A second aspect of the present invention centrally manages the relationship between network users and virtual LANs in a computer network in which a plurality of virtual LANs that logically group terminals connected to the network are interconnected. The server includes a user information central management server and a client, and the client transmits a virtual LAN setting information request to which user information is added to any of the user information central management servers. Virtual LAN based on terminal user attribute information of LAN setting information request
Searching for setting information, transmitting a virtual LAN setting information response to the client,
The communication parameters of the terminal are set based on the setting information response.

[0010] Using the terminal user attribute information of the virtual LAN setting information request received by the user information central management server, user information is searched, and information necessary for accessing a subnet suitable for the user is virtually retrieved. Notify the client in the LAN setting information response. As a result, the client can obtain setting information suitable for the user, and can automate setting and share terminals.

In a third aspect of the present invention, in a computer network in which a plurality of virtual LANs for logically grouping terminals connected to the network are interconnected, one exists for one user group and terminal user attribute information is provided. User attribute information distributed database to be managed and one virtual L
An AN includes a logical setting distributed management server and a client. The client transmits a virtual LAN setting information request to which the user information is added to the logical setting distributed management server. LA
N. Selecting an appropriate user attribute information distributed database based on the terminal user attribute information of the setting information request, and obtaining information from the user attribute information distributed database if the user information is not held in advance, If the user already has the information, the information is used to transmit a virtual LAN setting information response to the client, and the client sets communication parameters of the terminal based on the virtual LAN setting information response. It is characterized by.

Using the terminal user attribute information of the virtual LAN setting information request received from the client, the logical setting distribution management server searches for an entry in the user attribute information database in which user information is registered. The user attribute information distributed database entry is the user's subnet,
The information necessary for accessing the subnet is held and distributed to each logical setting distribution management server. The logical setting distributed management server puts information necessary for accessing the subnet suitable for the user in the virtual LAN setting information response,
Notify the client. As a result, the client can obtain setting information suitable for the user, and can automate setting and share terminals.

According to a fourth aspect of the present invention, in a computer network in which a plurality of virtual LANs for logically grouping terminals connected to a network are interconnected, one exists for each user group, and terminal user attribute information is provided. It comprises a user information distribution management server to be managed, one relay agent for one virtual LAN, one logical setting address central management server, and a client, and the client requests a virtual LAN setting information request to any relay agent. And the relay agent accesses the logical configuration address central management server using the terminal user attribute information of the virtual LAN configuration information request,
The relay agent obtains the address of the user information distribution management server, the relay agent relays the virtual LAN setting information request to the user information distribution management server, and based on this, the user information distribution management server sends a virtual LAN setting information response. The relay agent transmits the virtual LAN setting information response to the client, and the client sets communication parameters based on the virtual LAN setting information response.

That is, the relay agent searches the database of the logical setting access centralized management server to bridge the client and the user information distributed management server, and the user information distributed management server sets the virtual LAN according to the user. Supplying information to clients.
As a result, the client can obtain the setting information suitable for the user and the logical resource information of the assigned network, and can automate the setting and share the terminal.

According to a fifth aspect of the present invention, in a computer network in which a plurality of virtual LANs for logically grouping terminals connected to a network are interconnected, there is one for each user group and terminal user attribute information is stored. A user information distributed management server to be managed, one logical setting address distributed management server existing for one user group, and one relay agent and client existing for one virtual LAN, wherein the client is an arbitrary relay agent Sends a virtual LAN setting information request to the relay agent, the relay agent selects an appropriate logical setting address distribution management server based on the terminal user attribute information, and holds the address information of the user information distribution management server in advance. If not, enter information from the logical setting address distribution management server. If the address information already exists, the relay agent uses the information, and the relay agent relays the virtual LAN setting information request to the user information distribution management server. Transmits a virtual LAN setting information response to the relay agent, the relay agent transmits the virtual LAN setting information response to the client, and the client sets communication parameters based on the virtual LAN setting information response. Features.

That is, the relay agent obtains the address of the user information distribution management server from the logical setting address distribution management server, thereby bridging the client and the user information distribution management server. Is supplied to the client. As a result, the client can obtain the setting information suitable for the user and the logical resource information of the assigned network, and can automate the setting and share the terminal.

[0017]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Referring now to FIGS.
An embodiment will be described.

When the user tries to access the network via the terminal, the user identification means 003 sends the user information 0 including the user name to the setting information obtaining means 002.
11 is notified.

The setting information obtaining means 002 transmits a virtual LAN setting information request 012 including the user name to the setting information notifying means 006. The virtual LAN setting information request 012 is a communication packet as shown in FIG. 3, and includes a message identifier, a message number, a user name, a virtual LAN ID, and fields for describing virtual LAN connection information. I have. The message identifier describes information indicating that this message is a virtual LAN setting information request. The message number is a sequential number for indicating that the message corresponds to a virtual LAN setting information response message described below, and is generated by a random number. In the virtual LAN setting information request 012, the virtual LAN ID and the virtual LAN connection information are blank.

The setting information notifying means 006 extracts the user name from the virtual LAN setting information request 012, and transmits a search request 013 including the user name to the user information searching means 004.

The user information search means 004 receives the search request 01
3 and the user name, the virtual LAN ID and the virtual LAN as shown in FIG.
A search is performed using a user database 005 that stores connection information, and a virtual LAN ID and a virtual L corresponding to the user name are searched.
Obtain AN connection information. The user information search means 004 transmits the virtual LAN ID and the virtual LAN connection information of the search result to the setting information notification means 006 as the search result 014.

The setting information notification means 006 outputs the search result 014
The virtual LAN ID and the virtual LAN connection information are extracted from the virtual LAN ID and the virtual LAN setting information response 015 including the virtual LAN ID and the virtual LAN connection information.
Send to The virtual LAN setting information response 015 is a virtual LA
N has the same format as the N setting information request 012,
In the message identifier field, information indicating a virtual LAN setting information request is described.

The setting information obtaining means 002 transmits to the virtual LAN setting means 001 virtual LAN selection information 016 including a virtual LAN ID and virtual LAN connection information.

The virtual LAN selecting means 001 regards the virtual LAN connection information as an ATM address of an ATMARP server if the virtual LAN is an IP over ATM, and an ATM address of the LECS and an emulated LAN if the virtual LAN is a LAN emulation.
The virtual LAN joining request 017 is transmitted to the virtual LAN 1007 by regarding it as the ATM address of Name or LES. As a result, the terminal has joined the virtual LAN 1017.

FIG. 2 shows an example of the user database 005. The user database is searched using the user name as a key, and outputs a virtual LAN ID and virtual LAN connection information.

Next, a second embodiment will be described with reference to FIGS.

When a user tries to access the network via the client 101, the user identification means 1
02 notifies the user information notifying means 103 of the user information 121 including the user name or the user ID.

The user information notifying unit 103 transmits a virtual LAN setting information request 122 including a user name or a user ID to the user information obtaining unit 107 of the user information central management server 110. Virtual LAN setting information request 122
Is a communication packet as shown in FIG. 5, and includes a message identifier, a message number, a user name, and a user I.
D, a virtual LAN ID, and fields for describing virtual LAN connection information. The message identifier describes information indicating that this message is a virtual LAN setting information request. The message number is a sequential number for indicating that the message corresponds to a virtual LAN setting information response message described below, and is generated by a random number. Virtual LAN setting information request 1
In 22, the virtual LAN ID and the virtual LAN connection information are blank.

The user information obtaining means 107 extracts a user name or a user ID from the virtual LAN setting information request 122 and converts the user name and the user ID into a user information search request 12.
3 is transmitted to the user information search means 108.

The user information retrieval means 108 stores a user name, a user ID, a virtual LAN ID, and virtual LAN connection information as shown in FIG.
1 is used to search for virtual LAN ID and virtual LAN connection information using the user name and user ID as search keys. Further, the user information search means 108 operates the virtual L of the search result.
The AN ID and the virtual LAN connection information are transmitted to the setting information notification unit 109 as the user information search result 124.

The setting information notifying means 109 is a virtual LAN including the searched virtual LAN ID and the virtual LAN connection information.
A virtual LAN setting information response 125 having the same format as the setting information request 122 is returned to the setting information obtaining unit 104.

The setting information obtaining means 104 extracts the virtual LAN ID and the virtual LAN connection information from the virtual LAN setting information response 125 and transmits them to the network access method control means 105 as virtual LAN selection information 126.

The network access method control means 105 transmits the virtual LAN ID and the virtual LAN connection information to the IP
r ATM and LAN Emulsion Server
The connection processing to the virtual LAN is performed by using the virtual LAN connection protocol 127 assuming the ATM address of r. As a result, the terminal has joined the virtual LAN 106.

Next, a third embodiment will be described with reference to FIGS.

When the user tries to access the network via the client 201, the user identification means 2
02 notifies the user information notifying means 203 of the user information 221 including the user ID or the group name of the user name.

The user information notifying means 203 stores the user information 2
The virtual LAN setting information request 222 is transmitted to the user information obtaining means 208 of the logical setting distribution management server 210 based on the request 21. The virtual LAN setting information request 222 is a communication packet as shown in FIG. 8, in which a message identifier, a message number, a user name, a user ID, a group name, a virtual LAN ID, and virtual LAN connection information are described. Fields are included for The message identifier describes information indicating that this message is a virtual LAN setting information request. The message number is a sequential number for indicating that the message corresponds to a virtual LAN setting information response message described below, and is generated by a random number. In the virtual LAN setting information request 222, the virtual LAN ID and the virtual LAN connection information are blank.

The user information obtaining means 208 extracts a user name, a user ID, and a group name from the virtual LAN setting information request 222, and uses the user name and the user ID as a setting information search request 223 to search for user attribute information. To the means 209. A user attribute information search means 209, which is a search means of a distributed directory service characterized by location transparency and a distributed information sharing mechanism, extracts a user name, a user ID, and a group name from a setting information search request 223, and As a search path, selects the user attribute information distribution management server 212 that manages user information, and uses the distributed directory server protocol 228 to transmit the user information advertisement unit 21.
A search request is made to the user 6 using the user name and user ID as search keys.

The user information advertising means 216 is shown in FIGS.
The user name, user ID, virtual LAN ID and virtual LAN connection information are distributed and stored in a user attribute information distributed management database 213 as shown in FIG. LAN ID and virtual LA
N connection information is searched, and the virtual LAN ID and virtual LAN
Distribute connection information to distributed directory service protocol 228
The search result is transmitted to the user attribute information 209 by using.

The user attribute information 209 is a virtual L of the search result obtained by the distributed directory service protocol 228.
Setting information search result 2 with AN ID and virtual LAN connection information
24 is transmitted to the setting information notifying unit 211.

The setting information notifying unit 211 uses the virtual LAN ID and the virtual LAN connection information of the setting information search result 224 to generate a virtual LA having the same format as the virtual LAN setting information request.
N setting information response means 225, and the setting information obtaining means 20
Send to 4.

The setting information obtaining means 204 extracts the virtual LAN ID and the virtual LAN connection information from the virtual LAN setting information response, and notifies the network access method control means 205 as setting information 226.

The network access method control means 205 transmits the virtual LAN ID and the virtual LAN connection information to the IP
r Server address or Emulate required for initialization processing in ATM or LAN emulation
d) Connect to the virtual LAN using the virtual LAN connection protocol 227 assuming the LAN name. As a result, the client 201 communicates with the virtual LAN desired by the user.
N215.

FIGS. 9 to 11 show examples of the user attribute information distributed management database 213. FIG.

In the third embodiment, since the user attribute information is distributedly managed, the user information distribution management server 212
Are managed in a distributed manner by a group of users from FIG. 9 to FIG.

The user attribute information distributed database 212 comprising the user information advertisement means 216 and the user attribute information distributed management database 213 and the user attribute information search means 20
9 and an embodiment of the distributed directory service protocol 228 include IETF (IETF).
Reference P. Macpetris, “Domainin
ames-concepts and facil
items, "RFC 1034, 1987 and P. Ma
Cappetris, "Domain names-
implementation and special
fication, "RFC 1035, 1987 may also be used.

Next, a fourth embodiment will be described with reference to FIGS.

When the user attempts to access the network via the client 301, the user identification means 3
02 sends the user information 331 including the user name and the user ID to the user information notifying means 303.

The user information notifying means 303 sends the user information obtaining means 308 of the relay agent 309 to the virtual LAN.
A setting information request 332 is transmitted. The virtual LAN setting information request 332 is a communication packet as shown in FIG. 13, and includes a message identifier, a message number, a user name,
User ID, group name, virtual LAN ID, virtual LA
Fields for describing N connection information, a logical address, and an address of a relay agent are included. The message identifier describes information indicating that this message is a virtual LAN setting information request. The message number is a sequential number for indicating that the message corresponds to a virtual LAN setting information response message described below, and is generated by a random number. In the virtual LAN setting information request 332, the virtual LAN ID, the virtual LAN connection information, and the address of the relay agent are blank.

The user information obtaining means 308 extracts the group name from the virtual LAN setting information request 332 and transmits the group name to the user information distribution management server inquiry means 310 as a server information search request 333.

The user information distributed management server query means 310 uses the logical server search protocol 334 to send the user information distributed management server including the group name to the user information distributed management server search means 318 of the logically set address central management server 317. Send search request.

User information distribution management server search means 318
Is a user information distributed management server that manages the group from the group name using a user information distributed management server address database 319 that stores a group name, a group ID, and an address of the user information distributed management server as shown in FIG. 313, and retrieves the address of the user information distribution management server 313 from the logical server retrieval protocol 3.
34 to the user information distribution management server inquiry means 310.

The user information distribution management server inquiry means 310 transmits the server information search result 340 to the user information acquisition means 308.

The user information obtaining means 308 adds the address of the relay agent 309 to the virtual LAN setting information request 332 to generate a virtual LAN setting information request 335, and
User information distribution management server 3 of AN setting information request 335
13 to the logical setting information search means 314.

The logical setting information search means 314 is a virtual LAN
Using the user name and user ID of the setting information request 335 as search keys, as shown in FIGS.
D and the virtual LAN ID and the virtual LAN using the user database 315 that manages the virtual LAN connection information in a distributed manner.
The connection information is searched, and as shown in FIG. 18, an unused address is searched from the logical resource database 316 that manages the logical address as the logical resource of the virtual LAN of the group name.
Virtual LAN ID and virtual LA as allocation and search results
A virtual LAN setting information response 336 including the N connection information and the logical address is generated.

The virtual LAN setting information response 336 is a virtual LA
The format is the same as that of the N setting information request 332, but the message identifier includes information indicating that the request is a virtual LAN setting information request.
The search result is described in the AN connection information and the logical address. The logical setting information search unit transmits the virtual LAN setting information response 336 to the setting information notification unit 312 of the relay agent 309.

The setting information notifying unit 312 relays the virtual LAN setting information response 336 as the virtual LAN setting information response 337 to the setting information obtaining unit 304 of the client 301.

The setting information acquisition means 304 sends the virtual LAN setting information response 33 to the network access method control means 305.
7 is transmitted as the virtual LAN setting information 338.

The network access method control means 305 sends the virtual LAN ID and the virtual LAN connection information to IP over.
r It is regarded as a server address of ATM or LAN emulation or an emulated LAN name, and is connected to the virtual LAN N320 using the virtual LAN connection protocol 339. Further, the logical address is set as the logical address of the client 301.

FIG. 14 shows an example of the user information distribution management server address database in the logically set address central management server. The user information decentralized management server address database contains the user group name or user group I
Using D as a key, an address of a user information distribution management server that manages user attribute information of the user group is searched.

15 to 17 show the user database 3
15 examples are shown. Information in the user database is stored in a different user database for each group.
Therefore, a plurality of databases exist as shown in FIGS. 15 to 17 and are managed independently.

FIG. 18 shows an example of the logical resource database 316. The logical resource database 316 manages the use status of the logical addresses included in the virtual LAN as the logical resources. Information on the status of use is accumulated for all addresses included in the virtual LAN, and unused addresses are assigned.

Next, a fifth embodiment will be described with reference to FIGS. 19 to 27.

When the user tries to access the network via the client 401, the user identification means 4
02 sends the user information 413 including the user ID, the user name, and the group name to the user information notifying unit 403.

The user information notifying means 403 generates a virtual LAN setting information request 432 based on the above-mentioned user name and user ID, and sends the virtual LAN setting information request 432 to the user information obtaining means 408 of the relay agent 409. Send.
The virtual LAN setting information request 432 is a communication packet as shown in FIG. 20, and includes a message identifier, a message number, a user name, a user ID, a group name, and a virtual L.
Fields for describing the AN ID, virtual LAN connection information, logical address, and relay agent address are included. The message identifier describes information indicating that this message is a virtual LAN setting information request. The message number is a sequential number for indicating that the message corresponds to a virtual LAN setting information response message described below, and is generated by a random number. In the virtual LAN setting information request 432, the virtual LAN
The ID, the virtual LAN connection information, the logical address, and the address of the relay agent are blank.

The user information obtaining means 408 extracts the group name from the virtual LAN setting information request 432, and searches the wide area network database searching means 4 which is a searching means of a distributed directory service characterized by location transparency and a distributed information sharing mechanism.
Server information search request 4
Communicate as 33.

The wide area network database search means 410 takes the group name of the server information search request 433 as a search path, selects the logical setting address distribution management server 417 for managing server information, and executes the logical server search protocol 434.
A logical server search request including the group name is transmitted to the logical server address advertisement means 418 of the logical setting address distribution management server 417 by using.

The logical server address advertising means 418 is provided in FIG.
As shown in FIG. 1 to FIG. 23, the user information distribution management server 4 uses the user name distribution search server address database 419 that stores the group name, the group ID, and the address of the logical setting server in a distributed manner, using the group name as a search key.
13 addresses, and logical server search protocol 4
The address of the user information distribution management server 413 is returned to the wide area network database search means 410 as a logical server search response by using the server 34.

The wide area network database search means 410 is a user information distribution management server 413 of the logical server search response.
Is sent to the user information obtaining means 408 as a server information search response 440.

The user information obtaining unit 408 generates a virtual LAN setting information request 435 by adding the address of the relay agent 409 to the virtual LAN setting information request 432, and distributes the user information included in the server information search response 440. A virtual LAN setting information request 435 is transmitted to the logical setting information search unit 414 based on the address of the server 413.

The logical setting information retrieving means 414 receives the user name, the user ID, the virtual LAN I
D and the user database 415 storing virtual LAN connection information, the virtual LAN ID and virtual LAN connection information are searched using the user name and user ID of the virtual LAN setting information request 435 as search keys, as shown in FIG. Virtual LAN
An unused logical address is retrieved from the logical resource database 416 that manages the use status of the logical address, which is the logical resource, and assigned, and a virtual LAN setting information response 436 is generated.

The virtual LAN setting information response 436 is a virtual LA
The format is the same as that of the N setting information request 435, but includes the virtual LAN ID and the virtual LAN connection information that are the search results described above, and the message identifier describes information indicating that the request is a virtual LAN setting information request. . The logical setting information search unit 414 sends a virtual LAN setting information request 436
Is sent to the setting information notifying unit 412 of the relay agent 409.
Send to

The setting information notifying unit 412 relays the virtual LAN setting information response 437 to the setting information obtaining unit 404 of the client 401.

The setting information obtaining means 404 transmits the virtual LAN ID and the virtual LAN connection information in the virtual LAN setting information response 437 to the network access method control means 405 as virtual LAN setting information 438.

The network access method control means 405 converts the virtual LAN ID and the virtual LAN connection information into IP ove.
r ATM or ATM of LAN Emulation
The connection to the virtual LAN 420 is performed using the virtual LAN connection protocol 439 as an address or an emulated LAN Name. Further, the logical address is set as the address of the client 401.

FIGS. 21 to 23 show an embodiment of the user information distribution management server address database in the logical setting address distribution management server 410. FIG. Since the addresses of the user information distribution management server are distributed and managed, it is an independent table.

The logical setting address distribution management server including the logical server address advertising means 418 and the logical setting address database 419 and the wide area network database searching means 41
0 and the logical server search protocol 434 are described in P.I.
Macpetris, "Domain names
− Concepts and facilities
s, "RFC 1034, 1987 and P. Maccap
etris, "Domain names -impl"
elementation and specificat
ion, "RFC 1035, 1987.

FIGS. 24 to 26 show examples of the user database in the user information distribution management server.

FIG. 27 shows an example of the logical resource database. The usage status of all addresses in the range managed by the user information distribution management server is recorded, and unused resources can be allocated according to requests from clients.

[0079]

According to the first invention, the user does not change the terminal settings, does not depend on the geographical location accessed by the user, does not depend on the terminal used by the user, and only the user It is possible to access the same virtual LAN dependently. That is, even if the user moves or the user of the terminal changes, it is possible to access the virtual LAN to which the user belongs without changing any settings. Also,
There is no need to change network or server settings due to user movement or terminal movement. Therefore, the number of man-hours for managing the network and the terminal can be reduced. Further, since the present invention does not depend on a network layer protocol, it can be used by a terminal using a plurality of network layer protocols.

In the second invention, the user does not change the terminal settings, does not depend on the geographical position accessed by the user,
It is possible to access the same virtual LAN depending only on the user without depending on the terminal used by the user.
That is, even if the user moves or the user of the terminal changes, it is possible to access the virtual LAN to which the user belongs without changing any settings. Further, it is not necessary to change the settings of the network or the server due to the movement of the user or the terminal. Therefore, the number of man-hours for managing the network and the terminal can be reduced. Furthermore, since the present invention does not depend on the network layer protocol,
It can also be used on terminals that use multiple network layer protocols. Centralized management of user access to the network.

In the third invention, the user does not change the terminal settings, does not depend on the geographical position accessed by the user,
It is possible to access the same virtual LAN depending only on the user without depending on the terminal used by the user.
That is, even if the user moves or the user of the terminal changes, it is possible to access the virtual LAN to which the user belongs without changing any settings. Further, it is not necessary to change the settings of the network or the server due to the movement of the user or the terminal. Therefore, the number of man-hours for managing the network and the terminal can be reduced. Furthermore, since the present invention does not depend on the network layer protocol,
It can also be used on terminals that use multiple network layer protocols. Distributed management of user access to the network.

In the fourth invention, the user does not change the terminal settings, does not depend on the geographical position accessed by the user,
It is possible to access the same virtual LAN depending only on the user without depending on the terminal used by the user.
That is, even if the user moves or the user of the terminal changes, it is possible to access the virtual LAN to which the user belongs without changing any settings. Further, it is not necessary to change the settings of the network or the server due to the movement of the user or the terminal. Therefore, the number of man-hours for managing the network and the terminal can be reduced. Furthermore, since the present invention does not depend on the network layer protocol,
It can also be used on terminals that use multiple network layer protocols. The user information decentralized management server can be centrally managed, and the user's access to the network can be decentralized. In addition, logical resource allocation can be managed in a distributed manner.

In the fifth invention, the user does not change the terminal settings, does not depend on the geographical position accessed by the user,
It is possible to access the same virtual LAN depending only on the user without depending on the terminal used by the user.
That is, even if the user moves or the user of the terminal changes, it is possible to access the virtual LAN to which the user belongs without changing any settings. Further, it is not necessary to change the settings of the network or the server due to the movement of the user or the terminal. Therefore, the number of man-hours for managing the network and the terminal can be reduced. Furthermore, since the present invention does not depend on the network layer protocol,
It can also be used on terminals that use multiple network layer protocols. The user information decentralized management server can be decentralized and managed, and user access to the network can be decentralized. In addition, logical resource allocation can be managed in a distributed manner.

[Brief description of the drawings]

FIG. 1 is a configuration diagram showing a first embodiment of the present invention.

FIG. 2 is a diagram showing an example of the contents of a user information database.

FIG. 3 is a diagram showing a virtual LAN setting information request.

FIG. 4 is a configuration diagram showing a second embodiment of the present invention.

FIG. 5 is a diagram showing a virtual LAN setting information request.

FIG. 6 is a diagram showing an example of contents of a user information central management database.

FIG. 7 is a configuration diagram showing a third embodiment of the present invention.

FIG. 8 is a diagram showing a virtual LAN setting information request.

FIG. 9 is a diagram showing an example of the contents of a user information distribution management database of user group 1;

FIG. 10 is a diagram showing an example of the contents of a user information distribution management database of user group 2;

FIG. 11 is a diagram showing an example of the contents of a user information distribution management database of a user group 3;

FIG. 12 is a configuration diagram showing a fourth embodiment of the present invention.

FIG. 13 is a diagram showing a virtual LAN setting information request.

FIG. 14 is a diagram showing an example of the contents of a user information distribution management server address database.

FIG. 15 is a diagram showing an example of the contents of a user database of user group 1;

FIG. 16 is a diagram showing an example of the contents of a user database of user group 2;

FIG. 17 is a diagram showing an example of the contents of a user database of a user group 3;

FIG. 18 is a diagram showing an example of the contents of a logical resource database.

FIG. 19 is a configuration diagram showing a fifth embodiment of the present invention.

FIG. 20 is a diagram showing a virtual LAN setting information request.

FIG. 21 is a diagram showing an example of the contents of a user information distribution management server address of user group 1;

FIG. 22 is a diagram showing an example of the contents of a user information distribution management server address of user group 2;

FIG. 23 is a diagram showing an example of the contents of a user information distribution management server address of user group 3;

FIG. 24 is a diagram showing an example of contents of a user database of a user group 1.

FIG. 25 is a diagram showing an example of the contents of a user database of user group 2;

FIG. 26 is a diagram showing an example of the contents of a user database of a user group 3;

FIG. 27 is a diagram showing an example of the contents of a logical resource database.

[Explanation of symbols]

001 Virtual LAN setting means 002 Setting information obtaining means 003 User identifying means 004 User information searching means 005 User database 006 Setting information notifying means 007 Virtual LAN1 008 Virtual LAN2 009 Virtual LAN N 011 User information 012 Virtual LAN setting information request 013 Search request 014 Search result 015 Virtual LAN setting information response 016 Virtual LAN selection information 017 Virtual LAN joining request 101 Client 102 User identifying means 103 User information notifying means 104 Setting information obtaining means 105 Network access method control means 106 Virtual LAN N 107 User Information Obtaining Means 108 User Information Searching Means 109 Setting Information Notifying Means 110 User Information Centralized Management Server 111 User Information Centralized Management Database 121 User Information 122 Virtual LAN setting information request 123 User information search request 124 User information search result 125 Virtual LAN setting information response 126 Virtual LAN selection information 127 Virtual LAN connection protocol 201 Client 202 User identifying means 203 User information notifying means 204 Setting information Acquisition means 205 Network access method control means 208 User information acquisition means 209 User attribute information search means 210 Logical setting distributed management server 211 Setting information notification means 212 User attribute information centralized distributed management server 213 User attribute information distributed management database 215 Virtual LAN N 216 User information advertising means 221 User information 222 Virtual LAN setting information request 223 Setting information search request 224 Setting information search result 225 Virtual LAN setting information response 226 Setting information 2 7 virtual LAN connection protocol 228 distributed directory service protocol 301 client 302 user identification means 303 user information notification means 304 setting information acquisition means 305 network access method control means 308 user information acquisition means 309 relay agent 310 user information distributed management server Inquiry means 312 Setting information notifying means 313 User information distributed management server 314 Logical setting information search means 315 User database 316 Logical resource database 317 Logical setting address centralized management server 318 User information distributed management server search means 319 User information distributed management Server address database 320 Virtual LAN N 331 User information 332 Virtual LAN setting information request 333 Server information search request 334 Logical server detection Protocol 335 Virtual LAN setting information request 336 Virtual LAN setting information response 337 Virtual LAN setting information response 338 Virtual LAN setting information 339 Virtual LAN registration information 340 Server information search result 401 Client 402 User identifying means 403 User information notifying means 404 Setting information Acquisition means 405 Network access method control means 408 User information acquisition means 409 Relay agent 410 Wide area network database search means 412 Setting information notification means 413 User information distributed management server 414 Logical setting information search means 415 User database 416 Logical resource database 417 Logical setting address distributed management server 418 Logical server address advertising means 419 User information distributed management server address database 420 Virtual LAN 431 User information 432 Virtual LAN setting information request 433 Server information search request 434 Logical server search protocol 435 Virtual LAN setting information request 436 Virtual LAN setting information response 437 Virtual LAN setting information response 438 Virtual LAN setting information 439 Virtual LAN connection protocol 440 Server information Search response

Claims (5)

[Claims] 1. A computer network in which a plurality of virtual LANs that logically group terminals connected to the network are interconnected, and the virtual LAN owned by the terminal is determined according to the attributes of the terminal user. Network management method. 2. In a computer network in which a plurality of virtual LANs that logically group terminals connected to the network are interconnected, user information concentration for centrally managing the relationship between network users and virtual LANs. A management server and a client, the client sends a virtual LAN setting information request with user information added to any of the user information centralized management servers, and the user information centralized management server requests the virtual LAN setting information. LA based on the terminal user attribute information of
N setting information is retrieved, a virtual LAN setting information response is sent to the client, and the client sends the virtual LA setting information to the client.
A network management method, characterized in that communication parameters of the terminal are set based on an N setting information response. 3. A computer network in which a plurality of virtual LANs for logically grouping terminals connected to the network are interconnected, and one user exists for each user group and manages the user attribute information of the terminal. It consists of an attribute information distribution database, a logical setting distributed management server and a client that exist for one virtual LAN, and the client sends a virtual LAN setting information request with user information to the logical setting distributed management server. The logical setting distribution management server selects the user attribute information distribution database based on the terminal user attribute information of the virtual LAN setting information request, and if the user information is not held in advance, the user attribute information distribution database Get information from the user and use that information if you already have it Sends a virtual LAN setting information in response to the client, network management method characterized in that the client sets the communication Parameta of the terminal based on the virtual LAN setting information response. 4. A computer network in which a plurality of virtual LANs for logically grouping terminals connected to a network are interconnected, and one user exists for each user group and manages terminal user attribute information. An information distribution management server, a relay agent existing for one virtual LAN, one logical setting address centralized management server, and a client, and the client sends a virtual LAN setting information request to any of the relay agents, The relay agent accesses the logical setting address centralized management server by using the terminal user attribute information of the virtual LAN setting information request, acquires the address of the user information distributed management server, and the relay agent uses the virtual LAN setting information. Request is sent to the user information distribution management server Then, based on this, the user information distributed management server sends a virtual LAN setting information response to the relay agent, the relay agent sends the virtual LAN setting information response to the client, and the client sets the virtual LAN setting. A network management method characterized by setting communication parameters based on an information response. 5. In a computer network in which a plurality of virtual LANs for logically grouping terminals connected to a network are interconnected, one user exists for each user group and manages terminal user attribute information. It consists of an information distribution management server, a logical setting address distribution management server that exists one per user group, and a relay agent and a client that exists one per virtual LAN. The client is a virtual server for any relay agent. The LAN agent sends a LAN setting information request, the relay agent selects an appropriate logical setting address distribution management server based on the terminal user attribute information, and if the address information of the user information distribution management server is not held in advance, Obtained information from the logical setting address distributed management server If the address information is held, the information is used, the relay agent relays the virtual LAN setting information request to the user information distribution management server, and the user information distribution management server based on this relays the virtual LAN setting information. A network characterized by transmitting an information response to the relay agent, the relay agent transmitting the virtual LAN setting information response to the client, and the client setting communication parameters based on the virtual LAN setting information response. Management method.